Last updated
Interact with the Personal Identity Verification (PIV) application on a YubiKey.
$ winget install --id Yubico.PIVTool --exact --version 2.7.3Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
Yubico PIV Tool uses MSI (WiX). The silent install switches are /quiet /norestart.
msiexec.exe /i yubico-piv-tool-2.7.3-win64.msi /quiet /norestart
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
The Yubico PIV tool is used for interacting with the Personal Identity Verification (PIV) application on a YubiKey.
With it you may generate keys on the device, importing keys and certificates, and create certificate requests, and other operations. A shared library and a command-line tool is included.
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
2 known CVEs via NVD
An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack.
An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. A malicious PIV token can misreport the returned length fields during RSA key ge...
See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr.